VYPR

Chat On Desk Order Notifications

by WordPress

CVEs (1)

  • CVE-2026-14309Aug 1, 2026
    risk 0.00cvss epss 0.00

    The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has been validated before processing a password-reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators,…